+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 18
Windows Thread, Manually installing sophos in Technical; G'morning, We run sophos enterprise manager which obviously allows us to remotely install the client A/V program remotely across the ...
  1. #1

    Join Date
    May 2006
    Posts
    1,319
    Thank Post
    101
    Thanked 25 Times in 18 Posts
    Rep Power
    25

    Manually installing sophos

    G'morning,

    We run sophos enterprise manager which obviously allows us to remotely install the client A/V program remotely across the network to all the client machines. The issue I have at the moment is that some machines end up in the section of "computers that need manual installation" even though there is no reason they should. I had a laptop yesterday that ended up in there because the firewall was enabled, but after disabling it, it still remained in there almost as if sophos had cached it. All computers run windows 2000 pro SP4 or WinXP pro SP2 so there really should be no reason.

    Does anyone know why it would do this and if not, where is the location of the file to manually install sophos? I wasn't left with any documentation about this.

    Thanks

    James

  2. #2

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Manually installing sophos

    On XP machines, make sure simple file sharing is disabled. Some of the patches re-enable it, causing problems in a domain environment.

  3. #3

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,661
    Thank Post
    658
    Thanked 1,624 Times in 1,453 Posts
    Rep Power
    422

    Re: Manually installing sophos

    server it is installed on should have a share called interchk

    You need to run \\servername\interchk\esxp\setup.exe

    Ben

  4. #4

    Join Date
    May 2006
    Location
    Leicestershire
    Posts
    345
    Thank Post
    0
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Manually installing sophos

    The location of the install to manually install the client is

    Program Files\Sophos SWEEP for NT\ESXP

  5. #5
    steve's Avatar
    Join Date
    Oct 2005
    Location
    West Yorkshire
    Posts
    1,043
    Thank Post
    22
    Thanked 177 Times in 123 Posts
    Rep Power
    52

    Re: Manually installing sophos

    Check the time and date on the laptop, we've had issues with sophos when the server and laptop aren't the same.

  6. #6

    Join Date
    May 2006
    Posts
    1,319
    Thank Post
    101
    Thanked 25 Times in 18 Posts
    Rep Power
    25

    Re: Manually installing sophos

    Quote Originally Posted by steve
    Check the time and date on the laptop, we've had issues with sophos when the server and laptop aren't the same.
    This is probably the reason, i'll look into that. Thanks.

    Thanks for the file location as well.

    Just one more question now regarding security... I'm assuming it would be considered insecure to use the domain admin account as the account sophos uses to update? I don't know how this could be exploited, but something tells me it's not good. If so, should I have created a separate account for sophos updates and what permissions does that account need?

    Thanks.

  7. #7

    Join Date
    May 2006
    Posts
    110
    Thank Post
    0
    Thanked 12 Times in 11 Posts
    Rep Power
    19

    Re: Manually installing sophos

    yep, using the domain login account is not a good idea as although the password is stored as an encrypted hash in the config files on the local machine, it's not inconceivable that this could be cracked given enough time and resources. Using a specific update account (such as EMLIB as described in the network install guide) which only has access to the install shares is preferred method.

  8. #8

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Manually installing sophos

    Sophos Autoupdate uses the standard windows 'password' GUI control for the password in the update dialog. Any of the hundreds of 'password revealer' tools floating around the internet will show it in clear text.

  9. #9

    Join Date
    May 2006
    Posts
    1,319
    Thank Post
    101
    Thanked 25 Times in 18 Posts
    Rep Power
    25

    Re: Manually installing sophos

    Quote Originally Posted by riedquat
    Using a specific update account (such as EMLIB as described in the network install guide) which only has access to the install shares is preferred method.
    Can you give me any more information on this and/or point me towards to network install guide? What Geoff said made me nervous

  10. #10
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    25

    Re: Manually installing sophos

    Quote Originally Posted by plexer
    server it is installed on should have a share called interchk

    You need to run \\servername\interchk\esxp\setup.exe

    Ben
    After you have done this you have to go to the Command Consol and find the PC, Add the PC to the group and then update for your Antivirus to work as the manual installation is not fit for purpose.

    I was happy with the new Sophos.. but now after 3 days of struggling to get it on 500PC i am tearing my hair out..

    you set it to delete any virus.. but when it detects a virus it does nothing.. even tho the group settings says delete..

    It's not installing on half of my PC's

    You can only install on 15 PC's at a time of the installation crashes..

    rant rant rant..

    Dunno what remote registry settings are and if they are off or on

    rant rant rant.

    Had a perfectly working Sophos AV ver 4 last week... now chaos

    Have to go round to hundreds of PC's and take off simple file share..

    Rant rant rant

  11. #11

    Join Date
    May 2006
    Posts
    110
    Thank Post
    0
    Thanked 12 Times in 11 Posts
    Rep Power
    19

    Re: Manually installing sophos

    Basically you need to create a new account called EMLIB in your active directory and give it read permissions to the server share containing your sophos central installation directory (CID) which by default is \\servername\Interchk\ESXP

    Then in your update policy (created and configured in Enterprise Console) you use this account for your autoupdate credentials, using \\domain\EMLIB as the account name and \\servername\Interchk\ESXP as the update address.

    This way, when your client machines connect to retrieve thier sophos updates, the access the network using an account with very limited permissions. Should the password for the account be discovered, they can only gain read access to the CID.

    If you really do have a need to use an account with higher privledges, the EM Library comes with a tool called ObfuscationUtil.exe which can be used to hide the update details from casual view should anyone look at the configuration options http://www.sophos.com/support/knowle...cle/13094.html

    All of the installation documentation including network configuration and deployment guides can be found in the documentation section of the sophos website, http://www.sophos.com/support/docs/

  12. #12
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    25

    Re: Manually installing sophos

    Quote Originally Posted by _Bat_
    Quote Originally Posted by riedquat
    Using a specific update account (such as EMLIB as described in the network install guide) which only has access to the install shares is preferred method.
    Can you give me any more information on this and/or point me towards to network install guide? What Geoff said made me nervous
    http://www.edugeek.net/index.php?nam...er=asc&start=0

    There is a Link to the Network Guide..

  13. #13

    Join Date
    May 2006
    Posts
    1,319
    Thank Post
    101
    Thanked 25 Times in 18 Posts
    Rep Power
    25

    Re: Manually installing sophos

    Thanks for the help, i'll make sure I do that first thing tomorrow along with my other pile of work that I'm always "getting around" to.

  14. #14

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,619
    Thank Post
    1,499
    Thanked 1,053 Times in 922 Posts
    Rep Power
    304

    Re: Manually installing sophos

    @mattx, completly agree with you, I loved Trend when I evaluated it, but at the end of the day its cost and when its a MAJOR (being many many thousands of pounds) more than Sophos its never going to win.

    I have been having joys with EMLib these last few weeks, got V5 an V6 together on it to allow me to move over certain machines and leave others on V5 etc, but its not good at all

  15. #15
    Grommit's Avatar
    Join Date
    Sep 2006
    Location
    Weston-super-Mare
    Posts
    1,335
    Thank Post
    31
    Thanked 54 Times in 31 Posts
    Rep Power
    25

    Re: Manually installing sophos

    Quote Originally Posted by _Bat_
    Thanks for the help, i'll make sure I do that first thing tomorrow along with my other pile of work that I'm always "getting around" to.
    Tomorrow... !?! it's gonna take a week

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Installing FMS
    By lovelldr in forum MIS Systems
    Replies: 0
    Last Post: 4th September 2007, 12:12 PM
  2. Installing IIS
    By lalalalalalalalalalala in forum Windows
    Replies: 7
    Last Post: 3rd March 2007, 12:03 PM
  3. Replies: 9
    Last Post: 18th December 2006, 10:07 PM
  4. Manually adding records to DNS server
    By fooby in forum Wireless Networks
    Replies: 22
    Last Post: 20th January 2006, 09:17 AM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •